iCloud accounts compromised?

nooaah

macrumors 68000
Original poster
Sep 3, 2009
1,600
165
Philadelphia, PA
This is being discussed on Apple's message board, figured I'd bring it up here since others may be affected:

https://discussions.apple.com/thread/3957499?start=0&tstart=0

My Apple ID pw was reset twice in the past few days. I got no emails from Apple or any other alerts other than the Calendar app on my Mac and iMessages popping up stating my pw was incorrect. People in the apple.com thread are reporting that their @me email accounts have been sending out spam messages to their contacts coinciding with these password resets.

Has anyone heard anything about this as far as a cause?

Edit: It is interesting to note that it seems like everyone first experienced this issue on the 16th.
 

Arctix

macrumors newbie
Oct 15, 2011
24
0
Yes, my iCloud account has been compromised as well (started on the 16th of May). On the 16th of May, spam mail messages have been sent from my @me.com mail adress to all my adress book contacts (it was sent from my iPhone). On the 17th, Apple has deactivated my iCloud account, I had to reactivate it by changing my password. On the 18th my iCloud account has been deactivated again and I had to change my password again. This is NOT caused by spoofing, when I login, I can see the sent messages in my sent folder.

Possibilities are:
-Apple servers breached
-Some new phishing method in the wild on iPhones

Now I want to know if everything is OK now or not, as I'm not feeling safe with using iCloud anymore.
 

ixodes

macrumors 601
Jan 11, 2012
4,430
2
Pacific Coast, USA
Yes, my iCloud account has been compromised as well (started on the 16th of May). On the 16th of May, spam mail messages have been sent from my @me.com mail adress to all my adress book contacts (it was sent from my iPhone). On the 17th, Apple has deactivated my iCloud account, I had to reactivate it by changing my password. On the 18th my iCloud account has been deactivated again and I had to change my password again. This is NOT caused by spoofing, when I login, I can see the sent messages in my sent folder.

Possibilities are:
-Apple servers breached
-Some new phishing method in the wild on iPhones

Now I want to know if everything is OK now or not, as I'm not feeling safe with using iCloud anymore.
After migrating from my active MobileMe account to iCloud on the first day it was allowed, I decided to wait awhile before using it just in case there were problems.

In the meantime I got really busy at work, also I was not in a rush to try it since I had already setup another cloud strategy to use temporarily during the transition period.

Fast forward to today, I received an email from a friend describing the exact same problem that I'm reading about here. He's a bit frustrated, so thankfully I'm safe since I still have not touched mine.

I hope it works out well for those of you who are affected. Unlike MobileMe, I think that at some point this will be better, since Apple has so much at stake.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.